Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/qj4fkUI6KTi7uK-uhfA1Yac0xtg.roa
File: qj4fkUI6KTi7uK-uhfA1Yac0xtg.roa (raw, json)
Hash identifier: dPw/f37bVVV920PoSBv7MYEasqPYHhFl5XZzKF4X9Dk=
Subject key identifier: AA:3E:1F:91:42:3A:29:38:BB:B8:AF:AE:85:F0:35:61:A7:34:C6:D8
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01877584790F2260B40C6AB362B4B9B65339
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/qj4fkUI6KTi7uK-uhfA1Yac0xtg.roa
Signing time: Wed 12 Apr 2023 12:50:28 +0000
ROA not before: Wed 12 Apr 2023 12:50:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 5.105.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:75:84:79:0f:22:60:b4:0c:6a:b3:62:b4:b9:b6:53:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 12 12:50:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa3e1f91423a2938bbb8afae85f03561a734c6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:50:95:98:bb:52:6e:f0:b4:1e:e6:ad:28:bc:
70:d8:26:2c:19:4e:65:e6:3c:d0:16:fd:5a:e8:98:
c8:1e:ef:10:ba:b9:43:21:8d:fc:be:3b:4d:ff:89:
ec:1b:4d:2a:f2:c1:9a:05:bf:45:b1:3b:1e:5f:16:
c7:71:fd:d3:18:df:42:8b:9e:48:5f:99:51:a2:c0:
48:8a:35:cb:f8:4b:a7:df:c6:a1:ee:e4:0d:f5:d5:
c2:a3:90:4f:26:fe:79:a7:80:51:80:d0:ea:8f:a9:
5b:f9:fe:49:5f:6d:e0:0d:48:00:17:79:ef:9d:8b:
b1:7b:e8:c6:90:fe:38:4f:74:f7:b8:2d:7d:05:a0:
f9:4a:91:55:d0:5c:02:84:5d:c1:55:4d:2e:c8:2e:
b5:e6:1c:8c:59:4b:4b:35:d1:77:51:f1:13:96:b4:
08:ab:71:8d:a1:e3:d2:9f:04:d2:9c:d3:ec:fc:9c:
dd:91:70:77:37:b9:4c:ba:1d:1e:13:ef:68:cc:43:
19:cd:f2:ff:8f:70:df:52:bb:b1:a9:5e:47:ed:18:
94:cd:98:21:e4:a4:15:53:3d:3c:84:a5:40:c2:1c:
aa:97:e8:6a:5f:b4:26:7e:a0:81:84:6a:6e:a5:fd:
f4:c3:f6:94:a6:36:82:a0:1e:c3:df:0e:6d:d2:1a:
86:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3E:1F:91:42:3A:29:38:BB:B8:AF:AE:85:F0:35:61:A7:34:C6:D8
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/qj4fkUI6KTi7uK-uhfA1Yac0xtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.76.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:b0:b4:9f:ad:ea:59:42:1e:02:fb:d4:6a:60:d7:3f:50:df:
05:91:21:4c:8b:4b:b7:b2:92:5c:70:69:f8:45:d4:16:0a:c5:
5e:fe:9b:73:c7:3d:fd:9a:0f:83:15:50:e0:45:c4:43:70:2d:
ee:a6:90:9b:11:32:1b:0e:dc:cf:77:09:da:2d:3a:81:39:20:
5a:76:4c:38:c7:93:55:a9:83:4f:e3:ca:e4:6e:a7:a9:cd:4b:
af:5f:88:85:c4:9f:ea:69:28:a5:9e:e5:c1:81:a0:08:76:f2:
df:b4:77:91:cf:d5:2b:2b:76:94:09:b0:a0:1d:66:c3:3c:fa:
9a:c0:3f:f8:78:2c:c0:3d:aa:ae:b4:1d:ca:d3:83:72:63:54:
98:7c:8a:c9:6c:8b:f3:b9:fb:62:80:3f:2e:f4:32:2a:fd:f1:
4b:f6:4e:17:d1:5b:7e:35:6b:8d:63:e2:95:84:96:4a:f6:11:
82:a8:e6:3b:13:97:71:82:c8:41:ec:8d:5a:ee:73:d5:9d:b2:
ee:52:e9:2b:a4:f7:5c:7a:53:02:f3:b3:96:cc:ab:16:9f:73:
dc:5e:14:cd:4e:da:98:9d:00:fb:c9:75:5e:23:33:4c:e0:c9:
6d:c6:1b:7e:b1:1c:97:15:4d:e6:ca:b6:0b:24:67:ed:58:f4:
68:23:f1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org